hxxps://in[.]mt/8p6

Analysis

max time kernel
840s
max time network
845s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
19-01-2025 11:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://in.mt/8p6

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
2544	msedge.exe
2544	msedge.exe
4980	msedge.exe
4980	msedge.exe
1832	identity_helper.exe
1832	identity_helper.exe
4520	msedge.exe
4520	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe
4204	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe
4980	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4980 wrote to memory of 2144	4980	msedge.exe	77
PID 4980 wrote to memory of 2144	4980	msedge.exe	77
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 4560	4980	msedge.exe	78
PID 4980 wrote to memory of 2544	4980	msedge.exe	79
PID 4980 wrote to memory of 2544	4980	msedge.exe	79
PID 4980 wrote to memory of 784	4980	msedge.exe	80
PID 4980 wrote to memory of 784	4980	msedge.exe	80
PID 4980 wrote to memory of 784	4980	msedge.exe	80
PID 4980 wrote to memory of 784	4980	msedge.exe	80
PID 4980 wrote to memory of 784	4980	msedge.exe	80
PID 4980 wrote to memory of 784	4980	msedge.exe	80
PID 4980 wrote to memory of 784	4980	msedge.exe	80
PID 4980 wrote to memory of 784	4980	msedge.exe	80
PID 4980 wrote to memory of 784	4980	msedge.exe	80
PID 4980 wrote to memory of 784	4980	msedge.exe	80
PID 4980 wrote to memory of 784	4980	msedge.exe	80
PID 4980 wrote to memory of 784	4980	msedge.exe	80
PID 4980 wrote to memory of 784	4980	msedge.exe	80
PID 4980 wrote to memory of 784	4980	msedge.exe	80
PID 4980 wrote to memory of 784	4980	msedge.exe	80
PID 4980 wrote to memory of 784	4980	msedge.exe	80
PID 4980 wrote to memory of 784	4980	msedge.exe	80
PID 4980 wrote to memory of 784	4980	msedge.exe	80
PID 4980 wrote to memory of 784	4980	msedge.exe	80
PID 4980 wrote to memory of 784	4980	msedge.exe	80

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://in.mt/8p6
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffc82033cb8,0x7ffc82033cc8,0x7ffc82033cd8
  2⤵
  PID:2144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1900,10295776470389576808,5445692896064577483,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1912 /prefetch:2
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1900,10295776470389576808,5445692896064577483,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1900,10295776470389576808,5445692896064577483,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2820 /prefetch:8
  2⤵
  PID:784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,10295776470389576808,5445692896064577483,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,10295776470389576808,5445692896064577483,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3332 /prefetch:1
  2⤵
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,10295776470389576808,5445692896064577483,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4676 /prefetch:1
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1900,10295776470389576808,5445692896064577483,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5368 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1900,10295776470389576808,5445692896064577483,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5364 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,10295776470389576808,5445692896064577483,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5796 /prefetch:1
  2⤵
  PID:428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,10295776470389576808,5445692896064577483,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5780 /prefetch:1
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,10295776470389576808,5445692896064577483,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2080 /prefetch:1
  2⤵
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,10295776470389576808,5445692896064577483,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5772 /prefetch:1
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=1900,10295776470389576808,5445692896064577483,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=3568 /prefetch:8
  2⤵
  PID:2708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,10295776470389576808,5445692896064577483,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1700 /prefetch:1
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,10295776470389576808,5445692896064577483,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4716 /prefetch:1
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,10295776470389576808,5445692896064577483,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6420 /prefetch:1
  2⤵
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1900,10295776470389576808,5445692896064577483,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=4580 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4204

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4696

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1612

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4c1a24fa898d2a98b540b20272c8e47b

SHA1
3218bff9ce95b52842fa1b8bd00be073177141ef

SHA256
bbcc378fcbf64580e7a48b4e7ca9be57fa0a1f2e747f488325685bdb18d73a95

SHA512
e61f196e7f1c9a5fe249abe9b11eea770fb2f4babc61f60b12c71f43e6fe9354cf14869daf46abc2c2655bce180252acd43c10562a2dcd31fa7d90d33253820e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f1d2c7fd2ca29bb77a5da2d1847fbb92

SHA1
840de2cf36c22ba10ac96f90890b6a12a56526c6

SHA256
58d0f80310f4a84f687c5ce0adaa982eb42fe4480510399fa2ae975d40bb8bc5

SHA512
ede1fafea2404f16948fe0b5ea5161ccee3ee6e40c55ff98c337eac981a6776b9c73dc030a5c59e4347aec91259f497539206e71949c33adcecbf2c846709e14

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\10b591cd-6fb5-4bac-9653-99bb77909be5.tmp

Filesize
9KB

MD5
3687c51a8531ac6197b5dfde6d11fcaf

SHA1
72d5bd020a568618ef351102669509a6dcc9f5a0

SHA256
efc05d5ecc7b7a1f9637f9228da0d62c4b606f1942f810f02e11b85fc05be84f

SHA512
439384c76d7094cc31c0d9dd217387dfac6a42aea9a9f60f54b063bfe176e3a8c07bd260f53f8418fe9b325f1cd89dfaf57ee312a2042cb1adaa5b8a26f3726f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5a381926-0f30-4b44-960a-c6657b0d892d.tmp

Filesize
1KB

MD5
a4f300ce12a4caea0ac7934c884f3735

SHA1
ccc1c827d6a14164063f6daf5ff444aac4808a80

SHA256
bfe16f802ae377479c9a413540206c76e980556a51b495037061bd73450de3c1

SHA512
ed5a92e420a63c9f61e9317df4b59350871fc7a346998f905b9a6c2bc0b03cd8621cef022852f57c4d1598558a51dfdaced023a0e4c00f185989e9acdc60ae11

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
37KB

MD5
231913fdebabcbe65f4b0052372bde56

SHA1
553909d080e4f210b64dc73292f3a111d5a0781f

SHA256
9f890a9debcdfccc339149a7943be9aff9e4c9203c2fa37d5671a5b2c88503ad

SHA512
7b11b709968c5a52b9b60189fb534f5df56912417243820e9d1c00c97f4bd6d0835f2cdf574d0c36ecb32dbbf5fc397324df54f7fdf9e1b062b5dbda2c02e919

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015

Filesize
43KB

MD5
7f2c172ca810d85c0596390b4ab21df3

SHA1
d4acb412e626e744609aa326247bd7eeec469bec

SHA256
4ccac6b00b8d6b7bec9886d8a23d84131bed955d995a37b5017196b03d1edab6

SHA512
961fd847cdc7b7c54dcb5ec19e3446701de454e9d06e1e2025360a1d0b426d204fb8aec90b854c7b2dbe3153aa66b5d90ba56f8ac6a8bc996177642d6f55c263

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
576B

MD5
9f51ff7832b4acf5f54a87cfae28ed62

SHA1
a279cc7ba426b59ae09b753007ef63e9c091ca22

SHA256
92a31407f406a62cb04d1f62fc61ec73cf4923bb3f54c2a79634de2cc555d40c

SHA512
8ed93d95063f26048f40a51251371b7fc4ad28a224056afbd6ce8a31885589d111dd431065789db9ccd30ce110a0994090bb73eeeb9dd79138512aaea50acb57

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
576B

MD5
9eb0b3e81d0cc34e69cff258bb93bdcd

SHA1
5518f9708863f51f12c37fc768601bb7deca86cf

SHA256
8486066a794b78bed26f37f2f496f601789126e67af6b9a05b685dcf7d4996e2

SHA512
95d989acea0e15c029261ea5ef5d51d357bb09f0a88990039d191e9f8d98794a26a880385759ccb1d6b82226960a503a786d62dd1555defcfc75d88ec69c29cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
576B

MD5
38e1d67b54c11f0c00f891f9978744fd

SHA1
33da57255b67c647fbe08d55680f23cbe103209e

SHA256
a6deefc3736cffbb67580cb625da273ad3b1072bb1c72db0dab35089457b2649

SHA512
04748c5e8d72f83413fe646b0e7110efc9428a744e07cce9711533101129e449a3b990548fd13d950a226746cba18418b1e87a20df1ca38fc95d4a52be09fde0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
432B

MD5
a088d9a9c1bbbc59d71a098de526c604

SHA1
26c9de6dc7b2cfe69bc24229f1982d8510babd54

SHA256
9094940e62eb3ec21310c323e761b7d9923d0f5bc37f1825d6e546a07a7d102f

SHA512
745e75631925fe34881f5a6492f423635482b9af560494e1c5120d577c36eaae4e2c936d90c7dd9cd34776995c4c11525d0e4ae5b3ba56b00fe3aa3cf7d180bb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
d781c538f636f1e5ea5d42b2757eaa9e

SHA1
3d6e9732a7a377fa160d54a2e9eab01b673975dc

SHA256
9aa376072048a420d1025b3c37f819cad08b659f22410c55cb0fc7f4e9a7b2e4

SHA512
460ba03ab084751a5ba680b419edf2696648a7a9b89d83777fe5f8f93bea0cc2e9f016e4acfbcf7a0f4b46aecc5f169b6aad727292a45ef549c081b5eee850c0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
e374f72cd67961ea16075e17a9432a29

SHA1
d8ebe96794ca982cb18a8885a781b150deeb2f67

SHA256
e181ca5e8f6867ae7645ee4091fd7dbf01d4a86159d0d5a670fb06a85c76145d

SHA512
f2a9a1bd7d008a69dd2423299cac4a8a237fbb703ea487d7dc136f9ed88343ad15ad76cd87ac0b9ada0d0a8fa8c0f81aa83f7c0ad6bbafe3e37d5e18d3094473

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
3002545b12d8bb77852a847a993bec0e

SHA1
afcc0331e10bd3c08b0c0e3e8eb19786b776075e

SHA256
ca517e07a94f3c4cdaabe219b9eee289e5a346fcfc22f6f50b04ec832bfd33d4

SHA512
14e9a996f3dfa882d08eff358152d75583fe309f647680e373a4333dadc366d04ec6453e27a3dfbe8bc256f45c77a969c41f58fb5655337135c7b70f36cfd1c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
b8d50f066de914aef0ccbadc98ff3c8a

SHA1
60a3d12dad7f701a75d5815f8ac20ccffdacd781

SHA256
ea46af1d95a9c23259cc98747e89dc6ab16448096caa5bcba525e7ab970a8ce4

SHA512
142e0f023aef47d9b7e23e9d804b45b5b8d12673e6823c3122532fe8acb1a0524c0dd3bb6ca6139db60f2c2d3217c83e1b067a92318a5eeadd588e3c9a2ac45d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
71e7c5631dbbdbc0263e40ab621518b8

SHA1
414811cdb7d17a3c178d01d6ebc4793b201cd05c

SHA256
139fa88e6c9a050187f01baece726eee9267378cf5c1fa90c6082e424d91ec86

SHA512
d7365078845865a370cc0d37b4c64b0ff585f61580c9cbd1d6f67c0a45cfda6c55958a67e0de2dcfe7f68d2ea202d2a309a7dd971e5b90f88014c6c954ee51ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
718348d9cf36fc1f91767804c7bbe8f0

SHA1
f4dadf19a6792c13337105e1b7c03875e0876e6a

SHA256
81f08eaee0a4c8e1fb8cd305259b7b4862c19edd59c009f32b6b4a5fcb2f6bd5

SHA512
b5b30a3ca49b3dce7c4fb694976815efc8153fe545563b46b210a2a47b41935c8749efbcb1b42c47e229dad5263cce36129fa5696968dda2e17b624bba0fb9e4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
cadd274c8ea4e7203419c902c920770d

SHA1
b9dd011fb69dbb1deb8fc4f5fac8b8bbe83a9b68

SHA256
fa7a57dc0a71841d63089aa456e8399f5ea60b56c89dc1651c7a73125c2dee38

SHA512
e25c2ebed8f0dc71dd9ba320a708e80fab4d8496f410b2c5f129ec5977a8f79c5e3421fc89eabf3916eb9097a35b3595eefb78acd367fa74ff20ff132a645d96

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
02e135f2ddaea656a3a35f6e19c4b977

SHA1
aa8e8e2b1e4fbc640177f32682e74313fab68342

SHA256
12237c64df2d28d2638e604a2eda2778f4ec500f8450f7c1a122ff36e6695561

SHA512
431979da9452bc074c3267d6ab0f1ac183fffe981655fb6539739f6906ef9100cf5fe7b977de3755caa31364339033f56397537909e5c61e4e0b9590a3b80999

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
c42bc5f48525924da07b1a2b69e9766c

SHA1
d185abd28fd0485e9feaa3ffe2f5b06979da1187

SHA256
2aeb658a2d749903494b40ee0a2f7a09a2ea638c33d3595a2b434b094f50e0c7

SHA512
7599bfe37721e4c34b24fb02af55305081858dbaf4ad1a19ea6fe1ee3d1fb8a17dcbd8a384838c099f3c4da39b2b8e81fec6b0403fb1e59b8208a7b2a800b8f3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
72996c0b82ae1c86deca713d24e56453

SHA1
634f704e6ccc0fe74257cbac5a84943ce92a304f

SHA256
b619a5a291deb0843708a501db847542ba4c7e1204e6da6e69e49b47548c3532

SHA512
be1549cfd3dbf987f440ccdf6f009904eefb10249ac3202fccd80cfd5d16e7d0fd35c91ea06cfc9aea30a453f2036c3ded3b44361d3f386edd98e9dfa64bd330

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe583a16.TMP

Filesize
1KB

MD5
90fed4afa58cbbe195634750878ec4b5

SHA1
91bbab0b1cb354e0587dc82a389b02f04fe87ec1

SHA256
6b6344d4123ccf4207bd787a7b3427dbbf58c75cffaa755ead09afaa7583d7fa

SHA512
f762696f783b0735966663fec926933ee3cb1a58b4fbb48dff79c09fe91415d114fa4d48c958fc3a8a6053c45b01b6f04589520101c84aaf462538cbda4721ec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
0db5a279a4e174309c3272d5ddc56baa

SHA1
2d41c26e0bae830569f00bce788c7ac8366138ca

SHA256
224587ead7836aaa86e70ff5ef0bf6f5123ec480718daf296c1e238039e48eed

SHA512
51996fcae0dc2b8567f782ec868737b909d5abd3c8161b63cb16e91f7ccc3b656b0acf97a5227d3f3b5551672a63c100b5f6af6067614cc31753043f65216396

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
10e97ae11994a9e9c9ae1bf759dc4926

SHA1
34019a2fa6444f50232577bd7e15c579c8b13e72

SHA256
0e65965053b6e1c6f3b809b9693e6ea9824d3efd4461d06d89ed56c951f60e99

SHA512
e62e54eae11e4d9def6eeaa9ebcf7dc42e308fac9ea212af5017c0e8b7c282b4da278bbf215c5588a8d21835db4b98474e940099bc82d80ac60132e54e03dac8

Download Submit